CN101789896B

CN101789896B - Method for accessing internet by user equipment and system therefor

Info

Publication number: CN101789896B
Application number: CN200910004314A
Authority: CN
Inventors: 曹文利
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2009-01-24
Filing date: 2009-01-24
Publication date: 2012-10-17
Anticipated expiration: 2029-01-24
Also published as: CN101789896A; WO2010083775A1

Abstract

The invention discloses a method for accessing internet by user equipment and a system therefor and relates to the communication field for solving the problems of convenient lawful interception and billing by directly accessing the internet through an access gateway. The invention adopts the solution that: the access gateway AG receives the activated packet data protocol PDP context request message sent by the user equipment UE and the AG is in the activated state; the AG differentiates the received business flow of the UE; and if the business flow of the UE is the flow of a Gi interface, the AG forwards the flow of the Gi interface to the internet. The invention is used for accessing the internet by the user.

Description

A kind of method and system of accessing internet by user equipment

Technical field

The present invention relates to the communications field, relate in particular to a kind of method and system of accessing internet by user equipment.

Background technology

AP (Access Point, access point) is based on fixedly IP transmission network, and the network equipment of wireless access service is provided for home/business.

The networking of AP is as shown in Figure 1.UE (User Equipment; Subscriber equipment) insert access point through eating dishes without rice or wine, access point inserts IP transmission network (the possible integrated home gateway of access point) through HGW (Home Gateway, home gateway); Be connected to SeGW (the Security Gateway in the mobile core network through the IP transmission network then; Security gateway), be connected to AG (Access Gateway, IAD) (IAD possibility integrated security gateway).IAD is connected to CS domain core net and PS domain core net.

UE wants to visit Internet (internet) through access point; Then will be through GGSN (the Gateway GPRS Support Node of PS domain core net; Gateway GPRS Support Node) Gi interface (the GPRSInternet Interface of network element; Reference point between GPRS and external packet data network), be connected with the internet.At this moment data flow is as shown in Figure 1.

Under this mode, the flow of UE access internet will pass through mobile core network, the bandwidth of waste mobile core network, and increased time delay.In order to alleviate the burden of core net, and reduce time delay, need to realize the function of data bypass.

Present data bypass function is generally all pointed out GPRS Internet interface (Gi interface) from access and is realized; Just insert and point out GPRS Internet interface; UE visits home network through the GPRS Internet interface of access point then, perhaps direct access internet.

State in realization to insert and point out the Gi interface, in the process of access internet, the inventor finds to exist at least in the prior art following problem:

The mode that the Gi interface is realized data bypass is pointed out in access, does not support bypass flow is carried out Lawful Interception, do not supported bypass flow is chargeed, perhaps be difficult to realize real time billing, do not support between access point switching, bypass flow is lacked control.

Summary of the invention

Embodiments of the invention provide a kind of method and system of accessing internet by user equipment, can reduce the flow of core net, reduce time delay, save cost, reduce investment, simultaneously, can be convenient to bypass flow is carried out Lawful Interception and charging.

For achieving the above object, embodiments of the invention adopt following technical scheme:

A kind of method of supporting data bypass comprises:

Access gateway AG receives the activation packet data protocol PDP Context request message that user equipment (UE) sends, and makes said AG be in state of activation;

Said AG distinguishes the service traffics of the said UE that receives;

If the service traffics of said UE are the flow of Gi interface, then said AG is transmitted to the internet with the flow of said Gi interface.

The method of the accessing internet by user equipment that the embodiment of the invention provides, user equipment (UE) is through the direct access internet of access gateway AG, and IAD goes out the Gi interface in the method; Therefore can reduce the flow of core net; Reduce time delay, save cost, reduce investment.In addition; Through the direct access internet of IAD; IAD can be convenient to Lawful Interception relevant information and Content of communciation, can charge to bypass flow, can realize real time billing, can support the switching between access point; Can implement control to bypass flow, like deep message detection, filtration, speed limit etc.

A kind of method of data bypass comprises:

Access gateway AG receives the activation packet data protocol PDP Context request message from user equipment (UE);

Said AG distinguishes the service traffics of the said UE that receives;

If the service traffics of said UE are the flow of Gi interface, then said AG transmits the flow of said Gi interface.

The method of the data bypass that the embodiment of the invention provides is utilized access gateway AG, and user equipment (UE) is access internet directly, and IAD goes out the Gi interface in the method, therefore can reduce the flow of core net, reduces time delay, saves cost, reduces investment.In addition; Through the direct access internet of IAD; IAD can be convenient to Lawful Interception relevant information and Content of communciation, can charge to bypass flow, can realize real time billing, can support the switching between access point; Can implement control to bypass flow, like deep message detection, filtration, speed limit etc.

A kind of IAD comprises:

Receiving element is used to receive the activation packet data protocol PDP Context request message from user equipment (UE), makes said AG be in state of activation;

Discrimination unit when being used to be in state of activation, is distinguished the service traffics of the said UE that receives;

Retransmission unit is used for when the service traffics of said UE are the service traffics of Gi interface, the flow of said Gi interface being transmitted.

The IAD that the embodiment of the invention provides can make the direct access internet of user equipment (UE), and IAD goes out the Gi interface in the method, therefore can reduce the flow of core net, reduces time delay, saves cost, reduces investment.In addition; Through the direct access internet of IAD; IAD can be convenient to Lawful Interception relevant information and Content of communciation, can charge to bypass flow, can realize real time billing, can support the switching between access point; Can implement control to bypass flow, like deep message detection, filtration, speed limit etc.

A kind of communication system comprises:

Above-mentioned IAD.

The communication system that the embodiment of the invention provides, user equipment (UE) is through the direct access internet of access gateway AG, and IAD goes out the Gi interface in the method, therefore can reduce the flow of core net, reduces time delay, saves cost, reduces investment.In addition; Through the direct access internet of IAD; IAD can be convenient to Lawful Interception relevant information and Content of communciation, can charge to bypass flow, can realize real time billing, can support the switching between access point; Can implement control to bypass flow, like deep message detection, filtration, speed limit etc.

A kind of charging method comprises:

Access gateway AG receives the activation packet data protocol PDP Context request message that user equipment (UE) sends;

Said AG distinguishes the service traffics of the said UE that receives;

Said AG sends charging bill CDR to charging gateway, begins to charge;

After said AG and said UE deactivated PDP Context, said AG sent charging bill CDR to said charging gateway, stopped to charge.

The charging method that the embodiment of the invention provides because AG goes out the Gi interface, and AG integrated the SGSN/GGSN function; So; AG just can take on SGSN/GGSN role in charge system, generate ticket and control remaining sum, has realized bypass flow is chargeed, can be realized real time billing.

A kind of legal listening method comprises:

Said AG distinguishes the service traffics of the said UE that receives;

The monitoring that said AG receives the motoring gateway transmission begins request, begins to monitor;

The monitoring that said AG receives said motoring gateway transmission stops message, finishes to monitor.

The legal listening method that the embodiment of the invention provides because AG goes out the Gi interface, and AG integrated the SGSN/GGSN function, so AG just can take on SGSN/GGSN role in monitoring system, realized relevant information and Content of communciation are carried out Lawful Interception.

Description of drawings

Fig. 1 is the networking sketch map of access point in the prior art;

The FB(flow block) of the method for the accessing internet by user equipment that Fig. 2 provides for the embodiment of the invention;

The schematic flow sheet of the method for the accessing internet by user equipment that Fig. 3 provides for the embodiment of the invention one;

The schematic flow sheet of the method for the accessing internet by user equipment that Fig. 4 provides for the embodiment of the invention two;

The schematic flow sheet of the method for the accessing internet by user equipment that Fig. 5 provides for the embodiment of the invention three;

The schematic flow sheet of the method for the accessing internet by user equipment that Fig. 6 provides for the embodiment of the invention four;

The schematic flow sheet of the method for the accessing internet by user equipment that Fig. 7 provides for the embodiment of the invention five;

The schematic flow sheet of the method for the accessing internet by user equipment that Fig. 8 provides for the embodiment of the invention six;

The schematic flow sheet of the method for the accessing internet by user equipment that Fig. 9 provides for the embodiment of the invention seven;

The schematic flow sheet of the method for the accessing internet by user equipment that Figure 10 provides for the embodiment of the invention eight;

Figure 11 is the schematic flow sheet of the method for the accessing internet by user equipment that supplies of the embodiment of the invention nine;

The structural representation of the system of the accessing internet by user equipment that Figure 12 provides for the embodiment of the invention;

The FB(flow block) of the method for the data bypass that Figure 13 provides for the embodiment of the invention;

The FB(flow block) of the charging method that Figure 14 provides for the embodiment of the invention;

The FB(flow block) of the legal listening method that Figure 15 provides for the embodiment of the invention.

Embodiment

Embodiments of the invention provide a kind of method and system of accessing internet by user equipment, can reduce the flow of core net, reduce time delay, save cost, reduce investment, simultaneously, can be convenient to bypass flow is carried out Lawful Interception and charging.Below in conjunction with accompanying drawing the embodiment of the invention is described in detail.

The method of the accessing internet by user equipment that the embodiment of the invention provides, as shown in Figure 2, this method step comprises:

S1, access gateway AG receive the activation packet data protocol PDP Context request message that user equipment (UE) sends, and make said AG be in state of activation;

S2, said AG distinguish the service traffics of the said UE that receives;

S3, if the service traffics of said UE are the flow of Gi interface, then said AG is transmitted to the internet with the flow of said Gi interface.

Embodiment one

The method of the accessing internet by user equipment that the embodiment of the invention one provides can reduce the flow of core net, reduces time delay, saves cost, reduces investment, simultaneously, can be convenient to bypass flow is carried out Lawful Interception and charging.

As shown in Figure 3, these method concrete steps comprise:

S301, UE (User Equipment, subscriber equipment) send Attach Request message to SGSN (Serving GPRS Support Node, service universal grouping wireless business supporting node), initiate attaching process;

S302, SGSN return to adhere to UE and accept message;

S303, when UE has business to initiate, send to activate PDP (Packet Data Protocol, packet data protocol) context request message to AG (Access Gateway, IAD);

S304, AG judge whether the APN (Access Point Name, Access Point Name) in the PDP context activating request message is the professional APN of general flow control interface (Gi interface), if not; Then direct transparent transmission PDP context activating request message is carried out normal PDP context activation flow process, and promptly AG will activate the request transparent transmission to SGSN; SGSN initiates to create the PDP Context request to GGSN, and CN (CoreNetwork, core net) divides the IP address that is used in the Gi interface business for UE; And return and create the PDP Context response; Alternatively, UE and SGSN set up RAB (Radio Access Bearer, RAB); Then, SGSN returns PDP context activating to UE and accepts message;

If then this PDP Context of AG mark is a Gi interface PDP Context, and the processing of execution in step S305;

S305, AG are that UE divides the IP address that is used in the Gi interface business, and this address is as the pdp address of UE;

This step S305 can carry out in the PDP context activating process, promptly carries out at step S303 any place to the step S307, also can be behind the UE attaching process; Carry out before the data forwarding; Promptly after step S302 to the step S307 any place carry out, also can be after AG powers on, carry out before the data forwarding; Be that AG powers on the back to step S307 any place execution before, describe in the PDP context activating process, to be implemented as example here;

For IPv4 (Internet Protocol version 4, Internet Protocol version 4), AG can use DHCP (Dynamic Host Configuration Protocol, DHCP) to obtain the IP address for UE; For IPv6 (Internet Protocol version 6, Internet Protocol version 6), AG can use IPv6 stateless address auto configuration mode, and perhaps IPv6 state address auto configuration mode comes to obtain the IP address for UE;

Set up RAB (Radio Access Bearer, RAB) between S306, AG and the UE, this step S306 is an optional step, so dot in the drawings;

S307, AG send PDP context activating to UE and accept message, and accept to be carried as Gi interface business IP address allocated in the pdp address of message activating context;

S308, AG send charging bill CDR to charging gateway; Begin to charge, and the charging of Gi interface can indicate that this charging bill is the charging bill of this Gi interface flow according to any in the following field: Access Point Name (APN) Network/Operator Identifier, Record Type, SGSNaddress, Charging ID+GGSN Address Used, System Type, Node ID, Served PDPAddress;

S309, motoring gateway send to IAD and monitor start information, begin to monitor;

This step S309 can send the beginning monitoring information to said IAD in any time after AG starts, and present embodiment sends the beginning monitoring information at this and just illustrates.

When S310, data forwarding; The Gi interface flow is carried in the PDP Context of Gi interface business APN activation; When the message of Gi interface is transmitted to the internet; Can not carry out GTP (GPRS TunnellingProtocol, general packet wireless service tunnel protocol) encapsulation, directly be carried in the IP message and transmit;

S311, when in the PDP Context that Gi interface business APN activates, E-Packeting,

For IPv4, if AG is a private net address for the UE IP address allocated, then AG need do NAT (Network Address Translation, network address translation) conversion; If public network address, then AG makes routing forwarding;

For IPv6, AG carries out NAT-PT conversion (Network Address Translation-ProtocolTranslation, network address translation/protocol conversion);

When S312, data forwarding, UE is carried in the PDP Context of normal APN activation to the flow of core net, and AG does not do special processing;

S313, UE send PDP Context to AG and deactivate request;

S314, AG judge the PDP Context whether PDP Context that deactivates uses for the Gi interface business, if not, then carry out normal PDP Context and deactivate processing; Be that UE deactivates the PDP Context request message to the SGSN transmission; SGSN receives the back and sends the request of deletion PDP Context to GGSN, deletes after GGSN receives, and returns the deletion response to SGSN; SGSN receives back returning to UE and deactivates the PDP Context acceptance response, discharges RAB between UE and the SGSN alternatively;

If then handle according to step S315;

S315, AG are released to the IP address and the NAT/NAT-PT list item of the Gi interface business of UE distribution;

This step S313 can carry out in deactivating the PDP Context process; Being step S313 to the step S319, any place is carried out; Can after deactivating the PDP Context process, carry out, promptly any place is carried out after the step S316, also can after the UE separation process, carry out; Be step S312 any place execution afterwards, describe in deactivating the PDP Context process, to be implemented as example here;

S316, AG deactivate to UE transmission PDP Context and accept message;

S317, AG send charging bill CDR to charging gateway, stop to charge;

Before charge finishing, what AG can also the cycle sends charging bill CDR to charging gateway.

S318, motoring gateway send to AG and stop monitoring information, stop to monitor;

This step S318 can send to said IAD and stop monitoring information any time after beginning to monitor, and present embodiment sends at this and stops monitoring information and just illustrate;

In snoop procedure, AG can send monitoring information to motoring gateway.

S319, when having carried out step S306, then carry out the RAB dispose procedure between AG and the UE, because of being optional step, so dot in the drawings;

S320, UE initiate separation process through sending detach request message to SGSN;

S321, SGSN return to separate to UE and accept message.

Among each embodiment below present embodiment one reaches; The partial function of AG is integrated SGSN and/or GGSN; As activating, deactivate PDP Context, be used in address of Gi interface or the like for UE divides, but this AG still needs access network; SGSN and GGSN in network, have still been disposed, so in each figure, also draw.In addition, when AG only integrated during among SGSN and the GGSN one partial function, the SGSN of deployment and GGSN can accomplish all the other functions.

The method of the accessing internet by user equipment that the embodiment of the invention one provides; AG goes out the Gi interface in the method; AG is integrated SGSN+GGSN (Gateway GPRS Support Node; Ggsn) function of user plane uses specific APN to discern the Gi interface business, and AG is the IP address that UE distributes the Gi interface.UE can reduce the flow of core net through the direct access internet of AG, reduces time delay, saves cost, reduces investment.

In addition because the network element that carries out Lawful Interception is GSN (GPRS Support Node, a support node), so go out the scheme of Gi interface for AG since AG integrated SGSN, so can realize the Lawful Interception function.For Intercept related information; Mainly be some NAS (Non-Access Stratum; Non-Access Stratum) layer signaling, network side reports any or combination in any: GPRS in the following monitoring signaling to adhere to, begin to monitor to adhere to user notification, GPRS separations, sub-district/Routing Area Update, PDP context activation, PDP Context renewal, begins to monitor PDP Context notice, PDP context deactivation, packet domain short message in the existing protocol.These signalings go out at AG under the architectural framework of Gi finds identification by AG; For monitoring Content of communciation, mainly be user plane passage loaded service data, go out at AG under the architectural framework of Gi, the upstream data that comes from UE directly is forwarded to the internet by AG; The data that come from the internet directly are dealt into AG, issue UE through the user plane passage then.Be that the up-downgoing data are all passed through AG; Therefore, Intercept related information enough can directly be accomplished at AG with the monitoring Content of communciation, realizes simply, and can not change normal process and interface.

Moreover, go out in the scheme of Gi interface SGSN function that AG is integrated at AG; AG can take on the role of SGSN in the charging system; Ticket generates and remaining sum control is realized by AG: AG goes out the professional flow information of Gi to be added up by AG, and adds professional relevant field by AG and gather into CDR (Charging DataRecord, ticket); Report CGF (Charging Gateway Functionality, Charging Gateway Functionality);

The 3rd, because the PS chain of command still terminates on the network of operator, and can be the independent configuration data filtering rule of each UE, operator can realize the controlled function of Gi interface flow, like deep message detection, filtration, speed limit etc.;

The 4th, owing to the Gi interface goes out at AG, so can support the switching of UE between access point.

Embodiment two

The method of the accessing internet by user equipment that the embodiment of the invention two provides can reduce the flow of core net, reduces time delay, saves cost, reduces investment, simultaneously, can be convenient to bypass flow is carried out Lawful Interception and charging.

As shown in Figure 4, these method concrete steps comprise:

S401, UE send PDP context activating request to AG;

S402, AG judge whether the APN in the PDP context activating request message is the APN of Gi interface business, if not, then direct transparent transmission PDP context activating request message; Carry out normal PDP context activation flow process, promptly AG will activate the request transparent transmission to SGSN, and SGSN initiates to create the PDP Context request to GGSN; CN (Core Network, core net) is used in the IP address of Gi interface business for UE divides, and returns and create the PDP Context response; Alternatively, UE and SGSN set up RAB (Radio AccessBearer, RAB); Then, SGSN returns PDP context activating to UE and accepts message;

If then this PDP Context of AG mark is the PDP Context of Gi interface business use;

S403, AG give SGSN with the PDP context activating request forwards;

S404, SGSN send the PDP Context request of creating to GGSN;

S405, CN are the IP address that UE distributes the Gi interface, and GGSN returns to SGSN and creates the PDP Context response;

Here, GGSN belongs to the network element of core net, but reality is UE distributing IP address, might be other network element, think UE distributing IP address, reach here and be core net CN among more following embodiment.

Set up RAB between S406, SGSN and the UE, this step S406 is an optional step, so dot in the drawings;

S407, SGSN send PDP context activating to UE and accept message;

When S408, data forwarding, the Gi interface flow is carried in the PDP Context of Gi interface business APN activation, when the message of Gi interface is transmitted to the internet, can not carry out the GTP encapsulation, directly is carried in the IP message and transmits;

S409, when in the PDP Context that Gi interface business APN activates, E-Packeting,

For IPv4, if CN is a private net address for the UE IP address allocated, then AG need do the NAT conversion; If public network address, then AG makes routing forwarding;

For IPv6, AG carries out the NAT-PT conversion;

When S410, data forwarding, be carried in the PDP Context that normal APN activates to the flow of core net, AG does not do special processing;

S411, UE send PDP Context to AG and deactivate request;

S412, AG judge whether the PDP Context that deactivates is the professional PDP Context that uses of Gi, if not, then carry out normal PDP Context and deactivate processing; Be that UE deactivates the PDP Context request message to the SGSN transmission; SGSN receives the back and sends the request of deletion PDP Context to GGSN, deletes after GGSN receives, and returns the deletion response to SGSN; SGSN receives back returning to UE and deactivates the PDP Context acceptance response, discharges RAB between UE and the SGSN alternatively;

If then execution in step S413 handles;

S413, AG discharge the NAT/NAT-PT list item;

This step S413 can carry out in deactivating the PDP Context process; Being step S411 to the step S415, any place is carried out; Can after deactivating the PDP Context process, carry out, promptly any place is carried out after the step S414, describes in deactivating the PDP Context process, to be implemented as example here;

S414, AG deactivate to UE transmission PDP Context and accept message;

S415, if carried out step S406, then carry out this step, carry out the RAB dispose procedure between SGSN and the UE, because of being optional step, so dot in the drawings.

In the present embodiment two, send the beginning request message for AG to charging gateway, request is chargeed and motoring gateway sends to AG and monitors beginning message, and charging afterwards finish with monitor finish with the foregoing description one in process identical, repeat no more at this.

The method of the accessing internet by user equipment that the embodiment of the invention two provides; AG goes out the Gi interface in the method; The function of SGSN+GGSN user plane that AG is integrated is used APN identification Gi interface business, and CN is the IP address that UE distributes the Gi interface; At this, AG need not distribute the IP address of Gi interface business for UE.UE can reduce the flow of core net through the direct access internet of AG, reduces time delay, saves cost, reduces investment.

In addition because the network element that carries out Lawful Interception is GSN (GPRS Support Node, a support node), so go out the scheme of Gi interface for AG since AG integrated SGSN, so can realize the Lawful Interception function.For Intercept related information; Mainly be some NAS (Non-Access Stratum; Non-Access Stratum) layer signaling, network side reports any or combination in any: GPRS in the following monitoring signaling to adhere to, begin to monitor to adhere to user notification, GPRS separations, sub-district/Routing Area Update, PDP context activation, PDP Context renewal, begins to monitor PDP Context notice, PDP context deactivation, packet domain short message in the existing protocol.These signalings go out at AG under the architectural framework of Gi finds identification by AG; For monitoring Content of communciation, mainly be user plane passage loaded service data, go out at AG under the architectural framework of Gi, the upstream data that comes from UE directly is forwarded to the internet by AG; The data that come from the internet directly are dealt into AG, issue UE through the user plane passage then.Be that the up-downgoing data are all passed through AG; Therefore, Intercept related information enough can directly be accomplished at AG with the monitoring Content of communciation, realizes simply, and can not change normal process and interface;

Embodiment three

The method of the accessing internet by user equipment that the embodiment of the invention three provides can reduce the flow of core net, reduces time delay, saves cost, reduces investment, simultaneously, can be convenient to bypass flow is carried out Lawful Interception and charging.

As shown in Figure 5, these method concrete steps comprise:

S501, UE send PDP context activating request to AG;

S502, AG judge whether the APN in the PDP context activating request message is the APN of Gi interface business, if not, then direct transparent transmission PDP context activating request message is carried out normal PDP context activation flow process; If then this PDP Context of mark is the PDP Context of Gi interface business use;

S503, AG give SGSN with the PDP context activating request forwards;

S504, SGSN send the PDP Context request of creating to GGSN;

S505, CN are the IP address that UE distributes the Gi interface, and GGSN returns to SGSN and creates the PDP Context response;

Set up RAB between S506, SGSN and the UE, this step S506 is an optional step, so dot in the drawings;

S507, SGSN return PDP context activating to AG and accept message;

S508, AG are according to the mark among the determining step S502, if this PDP Context is a Gi interface PDP Context, judge then CN is whether the pdp address that UE distributes is private net address, if private net address then is UE application public network IP address;

If public network address, then not execution in step S509, directly execution in step S510;

S509, AG convert the pdp address of private network into public network IP address that the Gi interface uses;

S510, AG accept forwards with PDP context activating and give UE, and according to the processing among step S508, the S509, the PDP context activating of being transmitted accepts to comprise in the message public network IP address that the Gi interface uses;

S511, when in the PDP Context that Gi interface business APN activates, E-Packeting, can not carry out the GTP encapsulation, directly be carried on and carry out routing forwarding in the IP message;

When S512, data forwarding, be carried in the PDP Context that normal APN activates to the flow of core net, AG does not do special processing;

S513, UE send PDP Context to AG and deactivate request;

S514, AG judge whether the PDP Context that deactivates is the professional PDP Context that uses of Gi, if not, then carry out normal PDP Context and deactivate processing; Be that UE deactivates the PDP Context request message to the SGSN transmission; SGSN receives the back and sends the request of deletion PDP Context to GGSN, deletes after GGSN receives, and returns the deletion response to SGSN; SGSN receives back returning to UE and deactivates the PDP Context acceptance response, discharges RAB between UE and the SGSN alternatively;

If then handle according to step S515;

S515, AG are released to the public network IP address of UE application;

This step S515 can carry out in deactivating the PDP Context process; Being step S513 to the step S517, any place is carried out; Can after deactivating the PDP Context process, carry out, promptly carry out after the step S517, describe in deactivating the PDP Context process, to be implemented as example here;

S516, AG deactivate to UE transmission PDP Context and accept message;

S517, after having carried out step S506, then carry out the RAB dispose procedure between SGSN and the UE, because of this step is an optional step, so dot in the drawings.

In the present embodiment three, send the beginning request message for AG to charging gateway, request is chargeed and motoring gateway sends to AG and monitors beginning message, and charging afterwards finish with monitor finish with the foregoing description one in process identical, repeat no more at this.

The method of the accessing internet by user equipment that the embodiment of the invention three provides; AG goes out the Gi interface in the method, and the function of SGSN+GGSN user plane that AG is integrated is used APN identification Gi interface business; CN is the IP address that UE distributes the Gi interface; AG can convert the private network pdp address that CN distributes into public network address, and at this, AG need not realize the nat feature of user plane.UE can reduce the flow of core net through the direct access internet of AG, reduces time delay, saves cost, reduces investment.

In addition because the network element that carries out Lawful Interception is GSN (GPRS Support Node, a support node), so go out the scheme of Gi interface for AG since AG integrated SGSN, so can realize the Lawful Interception function.For Intercept related information, mainly be some NAS (Non-Access Stratum, Non-Access Stratum) layer signaling, network side reports the combination in any in the following monitoring signaling in the existing protocol; GPRS adheres to, begins monitoring and adheres to user notification, GPRS separation, sub-district/Routing Area Update, PDP context activation, PDP Context renewal, begins to monitor PDP Context notice, PDP context deactivation, packet domain short message.These signalings go out at AG under the architectural framework of Gi finds identification by AG; For monitoring Content of communciation, mainly be user plane passage loaded service data, go out at AG under the architectural framework of Gi, the upstream data that comes from UE directly is forwarded to the internet by AG; The data that come from the internet directly are dealt into AG, issue UE through the user plane passage then.Be that the up-downgoing data are all passed through AG; Therefore, Intercept related information enough can directly be accomplished at AG with the monitoring Content of communciation, realizes simply, and can not change normal process and interface;

Embodiment four

The method of the accessing internet by user equipment that the embodiment of the invention four provides can reduce the flow of core net, reduces time delay, saves cost, reduces investment, simultaneously, can be convenient to bypass flow is carried out Lawful Interception.

As shown in Figure 6, these method concrete steps comprise:

S601, UE activate main PDP Context process;

After S602, AG detect main PDP context activation completion; Send request from PDP context activation message to UE; Requesting activation can be specified the TFT (Traffic Flow Template, traffic flow template) of Gi interface business flow from PDP Context from PDP Context; From PDP Context, also can specify the QoS (Quality of Service, service quality) of Gi interface business.

S603, UE send to AG and activate from the PDP Context request;

Set up RAB between S604, AG and the UE, this step S604 is an optional step, so dot in the drawings;

S605, AG return from PDP Context to UE and accept message;

S606, when carrying out data forwarding, the flow of Gi interface business is carried on from PDP Context;

S607, when PDP Context E-Packets,

For IPv4, if CN is a private net address for the UE IP address allocated, then AG need do the NAT conversion; If public network address, then AG makes routing forwarding.

For IPv6, AG carries out the NAT-PT conversion;

S608, main PDP Context are when carrying out data forwarding, and AG does not do special processing;

Carry out between S609, UE and the GGSN deactivating from PDP Context;

S610, AG discharge the NAT/NAT-PT list item;

Carrying out main PDP Context between S611, UE and the GGSN deactivates.

In the present embodiment four, send the beginning request message for AG to charging gateway, request is chargeed and motoring gateway sends to AG and monitors beginning message, and charging afterwards finish with monitor finish with the foregoing description one in process identical, repeat no more at this.

The method of the accessing internet by user equipment that the embodiment of the invention four provides; AG goes out the Gi interface in the method; The function of SGSN+GGSN user plane that AG is integrated, Gi interface business flow uses and carries from PDP Context, and core net PS flow uses main PDP Context to carry; At this, AG does not need configuration of APN.UE can reduce the flow of core net through the direct access internet of AG, reduces time delay, saves cost, reduces investment.

Embodiment five

The method of the accessing internet by user equipment that the embodiment of the invention five provides can reduce the flow of core net, reduces time delay, saves cost, reduces investment, simultaneously, can be convenient to bypass flow is carried out Lawful Interception.

As shown in Figure 7, these method concrete steps comprise:

S701, UE carry out normal pdp context activation, can be main pdp context activations, also can be from pdp context activation, and wherein CN is the IP address that UE distributes the Gi interface;

Transmission PS territory flow between S702, UE and the network;

S703, AG carry out traffic differentiation according to the flow bypass strategy;

The bypass flow strategy here can be according to following one or more flows of distinguishing: discharge pattern, user's masterplate, QoS classification, IP address, URL (Universal Resource Locator, uniform resource locator);

If the S704 flow is the flow of Gi interface business, then be transmitted to the internet,

For IPv6, AG carries out NAT-PT conversion (network address translation/protocol conversion);

If the S705 flow then is transmitted to GGSN for the flow to core net;

S706, UE carry out normal PDP Context deactivation process, can be main PDP Context deactivation process, also can be from the PDP Context deactivation process;

S707, AG discharge the NAT/NAT-PT list item.

In the present embodiment five, send the beginning request message for AG to charging gateway, request is chargeed and motoring gateway sends to AG and monitors beginning message, and charging afterwards finish with monitor finish with the foregoing description one in process identical, repeat no more at this.

The method of the accessing internet by user equipment that the embodiment of the invention five provides, AG goes out the Gi interface in the method, AG the is integrated partial function of GGSN, AG use traffic bypass strategy identification Gi interface business, at this, AG does not need configuration of APN.UE can reduce the flow of core net through the direct access internet of AG, reduces time delay, saves cost, reduces investment.

Moreover, go out in the scheme of Gi interface GGSN function that AG is integrated at AG; AG can take on the role of GGSN in the charging system; Ticket generates and remaining sum control is realized by AG: AG goes out the professional flow information of Gi to be added up by AG, and adds professional relevant field by AG and gather into CDR (Charging DataRecord, ticket); Report CGF (Charging Gateway Functionality, Charging Gateway Functionality);

Embodiment six

The method of the accessing internet by user equipment that the embodiment of the invention six provides can reduce the flow of core net, reduces time delay, saves cost, reduces investment, simultaneously, can be convenient to bypass flow is carried out Lawful Interception.

As shown in Figure 8, these method concrete steps comprise:

S801, UE adhere to;

S802, when UE has business to initiate, send PDP context activating request message to AG;

S803, AG judge whether the APN in the PDP context activating request message is the APN of Gi interface business, if not, then direct transparent transmission PDP context activating request message; Carry out normal PDP context activation flow process, promptly AG will activate the request transparent transmission to SGSN, and SGSN initiates to create the PDP Context request to GGSN; CN (Core Network, core net) is used in the IP address of Gi interface business for UE divides, and returns and create the PDP Context response; Alternatively, UE and SGSN set up RAB (Radio AccessBearer, RAB); Then, SGSN returns PDP context activating to UE and accepts message;

If then this PDP Context of AG mark is a Gi interface PDP Context;

S804, AG give SGSN with the PDP context activating request forwards;

S805, SGSN judge whether APN is the APN of Gi interface business, if then for UE divides the IP address that is used in the Gi interface business, this address is as the pdp address of UE;

This step S805, SGSN divides the IP address that is used in the Gi interface business, can in the PDP context activating process, carry out; Be that step S802 is that any place is carried out to step S807; Also can be behind the UE attaching process, carry out before the data forwarding, promptly after the step S801; Any place is carried out before the step S807, describes in the PDP context activating process, to be implemented as example here;

Set up RAB between S806, AG and the UE, this step S806 is an optional step, so dot in the drawings;

S807, SGSN send PDP context activating to UE and accept message, in the pdp address of this message, are carried as Gi interface business IP address allocated;

When S808, data forwarding, the Gi interface flow is carried in the PDP Context of Gi interface business APN activation, when the message of Gi interface is transmitted to the internet, need not carry out the GTP encapsulation, directly is carried in the IP message and transmits;

S809, when in the PDP Context that Gi interface business APN activates, E-Packeting,

For IPv4, if SGSN is a private net address for the UE IP address allocated, then AG need do the NAT conversion; If public network address, then AG makes routing forwarding;

When S810, data forwarding, be carried in the PDP Context that normal APN activates to the flow of core net, AG does not do special processing;

S811, UE send the PDP Context request that deactivates to SGSN;

S812, SGSN judge whether the PDP Context that deactivates is the professional PDP Context that uses of Gi, if not, then carry out normal PDP Context and deactivate processing; Be that UE deactivates the PDP Context request message to the SGSN transmission; SGSN receives the back and sends the request of deletion PDP Context to GGSN, deletes after GGSN receives, and returns the deletion response to SGSN; SGSN receives back returning to UE and deactivates the PDP Context acceptance response, discharges RAB between UE and the SGSN alternatively;

If then be released to the IP address and the NAT/NAT-PT list item of the Gi interface business that UE distributes;

This step S812 is released to the IP address and the NAT/NAT-PT list item of the Gi interface business of UE distribution; Can in deactivating the PDP Context process, carry out, promptly step S811 any place to the step S814 is carried out, and can after deactivating the PDP Context process, carry out; Be to carry out behind the step S814; Also can after the UE separation process, carry out, promptly carry out after the step S815, describe in deactivating the PDP Context process, to be implemented as example here;

S813, SGSN deactivate PDP Context to the UE transmission and accept message;

S814, if this method in carried out step S806, then discharge RAB between SGAN and the UE, because of this step is an optional step, so represent for dotted line in the drawings;

S815, UE separate.

In the present embodiment six, send the beginning request message for AG to charging gateway, request is chargeed and motoring gateway sends to AG and monitors beginning message, and charging afterwards finish with monitor finish with the foregoing description one in process identical, repeat no more at this.

The method of the accessing internet by user equipment that the embodiment of the invention six provides, AG goes out the Gi interface in the method, the function of GGSN that AG is integrated, AG uses ANP identification Gi interface business, and SGSN is the IP address that UE distributes the Gi interface.UE can reduce the flow of core net through the direct access internet of AG, reduces time delay, saves cost, reduces investment.

In addition because the network element that carries out Lawful Interception is GSN (GPRS Support Node, a support node), so go out the scheme of Gi interface for AG since AG integrated GGSN, so can realize the Lawful Interception function.For Intercept related information; Mainly be some NAS (Non-Access Stratum; Non-Access Stratum) layer signaling, network side reports the combination in any in the following monitoring signaling: GPRS to adhere to, begin to monitor to adhere to user notification, GPRS separations, sub-district/Routing Area Update, PDP context activation, PDP Context renewal, begins to monitor PDP Context notice, PDP context deactivation, packet domain short message in the existing protocol.These signalings go out at AG under the architectural framework of Gi finds identification by AG; For monitoring Content of communciation, mainly be user plane passage loaded service data, go out at AG under the architectural framework of Gi, the upstream data that comes from UE directly is forwarded to the internet by AG; The data that come from the internet directly are dealt into AG, issue UE through the user plane passage then.Be that the up-downgoing data are all passed through AG; Therefore, Intercept related information enough can directly be accomplished at AG with the monitoring Content of communciation, realizes simply, and normal process and interface are not changed;

Embodiment seven

The method of the accessing internet by user equipment that the embodiment of the invention seven provides can reduce the flow of core net, reduces time delay, saves cost, reduces investment, simultaneously, can be convenient to bypass flow is carried out Lawful Interception.

As shown in Figure 9, these method concrete steps comprise:

S901, UE adhere to;

S902, when UE has business to initiate, send PDP context activating request message to AG;

S903, AG judge whether the APN in the PDP context activating request message is the APN of Gi interface business, if not, then direct transparent transmission PDP context activating request message; Carry out normal PDP context activation flow process, promptly AG will activate the request transparent transmission to SGSN, and SGSN initiates to create the PDP Context request to GGSN; CN (Core Network, core net) is used in the IP address of Gi interface business for UE divides, and returns and create the PDP Context response; Alternatively, UE and SGSN set up RAB (Radio AccessBearer, RAB); Then, SGSN returns PDP context activating to UE and accepts message;

If then this PDP Context of AG mark is a Gi interface PDP Context;

S904, AG give SGSN with the PDP context activating request forwards;

S905, SGSN judge whether APN is the APN of Gi interface business, if, then direct echo reply message;

Set up RAB between S906, SGSN and the UE, this step S906 is an optional step, so dot in the drawings;

S907, SGSN will activate context and accept message and return to AG;

After message accepted in S908, AG parsing activation context, judge whether PDP Context is Gi interface PDP Context, if then divide the IP address that is used in the Gi interface business for UE;

This step S908 divides the IP address that is used in the Gi interface business; Can in the PDP context activating process, carry out, promptly step S902 any place to the step S909 is carried out, also can be behind the UE attaching process; Carry out before the data forwarding; Be after the step S901, carry out before the step S909, describe in the PDP context activating process, to be implemented as example here;

S909, AG return PDP context activating to UE and accept message, and accept to be carried as Gi interface business IP address allocated in the pdp address of message activating context;

When S910, data forwarding, the Gi interface flow is carried in the PDP Context of Gi interface business APN activation, when the message of Gi interface is transmitted to the internet, can not carry out the GTP encapsulation, directly is carried in the IP message and transmits;

S911, when in the PDP Context that Gi interface business APN activates, E-Packeting,

When S912, data forwarding, be carried in the PDP Context that normal APN activates to the flow of core net, AG does not do special processing;

S913, UE send the PDP Context request that deactivates to SGSN;

S914, SGSN judge whether the PDP Context that deactivates is the professional PDP Context that uses of Gi, if then return response to AG;

S915, AG judge whether the PDP Context that deactivates is the professional PDP Context that uses of Gi, if not, then carry out normal PDP Context and deactivate processing; Be that UE deactivates the PDP Context request message to the SGSN transmission; SGSN receives the back and sends the request of deletion PDP Context to GGSN, deletes after GGSN receives, and returns the deletion response to SGSN; SGSN receives back returning to UE and deactivates the PDP Context acceptance response, discharges RAB between UE and the SGSN alternatively;

This step S915 is released to the IP address and the NAT/NAT-PT list item of the Gi interface business of UE distribution; Can in deactivating the PDP Context process, carry out, promptly step S913 any place to the step S917 is carried out, and can after deactivating the PDP Context process, carry out; Be to carry out behind the step S917; Also can after the UE separation process, carry out, promptly carry out behind the step S918, describe in deactivating the PDP Context process, to be implemented as example here;

S916, SGSN deactivate PDP Context to the UE transmission and accept message;

S917, after this method has been carried out step S916, then carry out RAB between SGAN and the UE and discharge;

S918, UE separate.

In the present embodiment seven, send the beginning request message for AG to charging gateway, request is chargeed and motoring gateway sends to AG and monitors beginning message, and charging afterwards finish with monitor finish with the foregoing description one in process identical, repeat no more at this.

The method of the accessing internet by user equipment that the embodiment of the invention seven provides, AG goes out the Gi interface in the method, and the partial function of the integrated GGSN of AG, AG use ANP identification Gi interface business, and AG is the IP address that UE distributes the Gi interface.UE can reduce the flow of core net through the direct access internet of AG, reduces time delay, saves cost, reduces investment.

In addition because the network element that carries out Lawful Interception is GSN (GPRS Support Node, a support node), so go out the scheme of Gi interface for AG since AG integrated GGSN, so can realize the Lawful Interception function.For Intercept related information; Mainly be some NAS (Non-Access Stratum; Non-Access Stratum) layer signaling, network side reports any or combination in any: GPRS in the following monitoring signaling to adhere to, begin to monitor to adhere to user notification, GPRS separations, sub-district/Routing Area Update, PDP context activation, PDP Context renewal, begins to monitor PDP Context notice, PDP context deactivation, packet domain short message in the existing protocol.These signalings go out at AG under the architectural framework of Gi finds identification by AG; For monitoring Content of communciation, mainly be user plane passage loaded service data, go out at AG under the architectural framework of Gi, the upstream data that comes from UE directly is forwarded to the internet by AG; The data that come from the internet directly are dealt into AG, issue UE through the user plane passage then.Be that the up-downgoing data are all passed through AG; Therefore, Intercept related information enough can directly be accomplished at AG with the monitoring Content of communciation, realizes simply, and can not change normal process and interface;

Embodiment eight

The method of the accessing internet by user equipment that the embodiment of the invention eight provides can reduce the flow of core net, reduces time delay, saves cost, reduces investment, simultaneously, can be convenient to bypass flow is carried out Lawful Interception.

Shown in figure 10, these method concrete steps comprise:

S1001, UE send PDP context activating request to AG;

S1002, AG judge whether the APN in the PDP context activating request message is the APN of Gi interface business, if not, then direct transparent transmission PDP context activating request message; Carry out normal PDP context activation flow process, promptly AG will activate the request transparent transmission to SGSN, and SGSN initiates to create the PDP Context request to GGSN; CN (Core Network, core net) is used in the IP address of Gi interface business for UE divides, and returns and create the PDP Context response; Alternatively, UE and SGSN set up RAB (Radio AccessBearer, RAB); Then, SGSN returns PDP context activating to UE and accepts message;

S1003, AG give SGSN with the PDP context activating request forwards;

S1004, SGSN send the PDP Context request of creating to GGSN;

S1005, CN are the IP address that UE distributes the Gi interface, and GGSN returns to SGSN and creates the PDP Context response;

Set up RAB between S1006, UE and the SGSN, this step S1006 is an optional step, so dot in the drawings;

S1007, SGSN return PDP context activating to UE and accept message;

When S1008, data forwarding, the Gi interface flow is carried in the PDP Context of Gi interface business APN activation, when the message of Gi interface is transmitted to the internet, can not carry out the GTP encapsulation, directly is carried in the IP message and transmits;

S1009, when in the PDP Context that Gi interface business APN activates, E-Packeting,

When S1010, data forwarding, be carried in the PDP Context that normal APN activates to the flow of core net, AG does not do special processing;

S1011, UE send the PDP Context request that deactivates to AG;

S1012, AG judge whether the PDP Context that deactivates is the professional PDP Context that uses of Gi, if not, then carry out normal PDP Context and deactivate processing; Be that UE deactivates the PDP Context request message to the SGSN transmission; SGSN receives the back and sends the request of deletion PDP Context to GGSN, deletes after GGSN receives, and returns the deletion response to SGSN; SGSN receives back returning to UE and deactivates the PDP Context acceptance response, discharges RAB between UE and the SGSN alternatively;

If then handle according to step S1013;

S1013, AG discharge the NAT/NAT-PT list item;

This step S1013 can carry out in deactivating the PDP Context process; Being step S1011 to the step S1015, any place is carried out; Can after deactivating the PDP Context process, carry out, promptly any place is carried out after the step S1015, describes in deactivating the PDP Context process, to be implemented as example here;

S1014, AG deactivate PDP Context to the UE transmission and accept message;

S1015, carried out step S1006, then carried out RAB between AG and the UE and discharge when this method.

In the present embodiment eight, send the beginning request message for AG to charging gateway, request is chargeed and motoring gateway sends to AG and monitors beginning message, and charging afterwards finish with monitor finish with the foregoing description one in process identical, repeat no more at this.

The method of the accessing internet by user equipment that the embodiment of the invention eight provides; AG goes out the Gi interface in the method, and AG the is integrated partial function of GGSN, AG use ANP identification Gi interface business; CN is the IP address that UE distributes the Gi interface, and AG need not distribute the IP address of Gi interface business for UE.UE can reduce the flow of core net through the direct access internet of AG, reduces time delay, saves cost, reduces investment.

Embodiment nine

The method of the accessing internet by user equipment that the embodiment of the invention nine provides can reduce the flow of core net, reduces time delay, saves cost, reduces investment, simultaneously, simultaneously, can be convenient to bypass flow is carried out Lawful Interception.

Shown in figure 11, these method concrete steps comprise:

S1101, UE activate main PDP Context, and wherein CN is the IP address that UE distributes the Gi interface;

After S1102, SGSN detect main PDP context activation completion; Activate message to the UE request of sending up and down from PDP; Requesting activation can be specified the TFT of Gi interface business flow from PDP Context from PDP Context, from PDP Context, also can specify the QoS of Gi interface business;

S1103, UE send PDP context activating request message to SGSN;

Set up RAB between S1104, UE and the SGSN, this step S1104 is an optional step, so dot in the drawings;

S1105, SGSN return PDP context activating to UE and accept message;

S1106, which PDP Context of SGSN notice AG carry the Gi interface flow;

S1107, when carrying out data forwarding, the flow of Gi interface business is carried on from PDP Context;

S1108, when PDP Context E-Packets,

S1109, main PDP Context are when carrying out data forwarding, and AG does not do special processing;

Carry out between S1110, UE and the GGSN deactivating from PDP Context;

S1111, AG discharge the NAT/NAT-PT list item;

Carrying out main PDP Context between S1112, UE and the GGSN deactivates.

In the present embodiment nine, send the beginning request message for AG to charging gateway, request is chargeed and motoring gateway sends to AG and monitors beginning message, and charging afterwards finish with monitor finish with the foregoing description one in process identical, repeat no more at this.

The method of the accessing internet by user equipment that the embodiment of the invention nine provides; AG goes out the Gi interface in the method; AG the is integrated partial function of GGSN; The flow of Gi interface uses and carries from PDP Context, and core net PS flow uses main PDP Context to carry, and AG need not dispose ANP.UE can reduce the flow of core net through the direct access internet of AG, reduces time delay, saves cost, reduces investment.

The IAD that the embodiment of the invention provides, shown in figure 12, comprising:

Receiving element 1201 is used to receive the activation packet data protocol PDP Context request message from user equipment (UE), makes said AG be in state of activation;

Discrimination unit 1202 when being used to be in state of activation, is distinguished the service traffics of the said UE that receives;

Retransmission unit 1203 is used for when the service traffics of said UE are the service traffics of Gi interface, the flow of said Gi interface being transmitted.

Further, this discrimination unit 1202 also comprises:

Judge module 1202A is used for judging whether the Access Point Name APN of PDP context activating request message is the APN of Gi interface business;

Distribute address module 1202B, be used for when said judge module confirms that said APN is the APN of Gi interface business, distribute the IP address of Gi interface for UE.

Further again, said retransmission unit 1203 also comprises:

Modular converter 1203A is used under the IPv4 network, if when being private net address for the UE IP address allocated, making the NAT dress and changes; Under the IPv6 network, do the NAT-PT conversion.

The communication system that the embodiment of the invention provides comprises above-mentioned IAD, and the structure of this IAD is same as the previously described embodiments.

The system of the accessing internet by user equipment that the embodiment of the invention provides, user equipment (UE) is through the direct access internet of access gateway AG, and IAD goes out the Gi interface in the present embodiment; Therefore can reduce the flow of core net; Reduce time delay, save cost, reduce investment.In addition; Through the direct access internet of IAD; IAD can be convenient to Lawful Interception relevant information and Content of communciation, can charge to bypass flow, can realize real time billing, can support the switching between access point; Can implement control to bypass flow, like deep message detection, filtration, speed limit etc.

The method of the support data bypass that the embodiment of the invention provides can reduce the flow of core net, reduces time delay, saves cost, reduces investment, simultaneously, simultaneously, can be convenient to bypass flow is carried out Lawful Interception.

Shown in figure 13, this method comprises:

S1301, access gateway AG receive the activation packet data protocol PDP Context request message from user equipment (UE);

S1302, said AG distinguish the service traffics of the said UE that receives;

S1303, if the service traffics of said UE are the flow of Gi interface, then said AG transmits the flow of said Gi interface.

Wherein, further, step S1302 comprises:

Distinguish according to the flow bypass strategy, said flow bypass strategy comprises: any one among IP address, discharge pattern, user's masterplate, QoS classification, the URL or multiple combination;

Perhaps, distinguish according to Access Point Name APN;

Perhaps, distinguish according to the packet data protocol PDP Context;

Perhaps, distinguish according to main PDP Context with from PDP Context.

IAD structure in the IAD that the embodiment of the invention provides and the foregoing description is identical, just repeats no more at this.

The charging method that the embodiment of the invention provides can make AG charge, and shown in figure 14, this method comprises:

S1401, user equipment (UE) send to access gateway AG and activate packet data protocol PDP Context request message;

S1402, said AG distinguish the service traffics of the said UE that receives;

S1403, AG send charging bill CDR to charging gateway, begin to charge;

S 1404, after AG and UE deactivate PDP Context, AG sends charging bill CDR to said charging gateway, stops to charge.

In addition, in above-mentioned charging method, before the end of chargeing, said AG can send charging bill CDR to said charging gateway periodically.

The legal listening method that the embodiment of the invention provides makes AG carry out Lawful Interception to bypass flow, and shown in figure 15, this method comprises:

S1501, user equipment (UE) send to access gateway AG and activate packet data protocol PDP Context request message;

S1502, said AG distinguish the service traffics of the said UE that receives;

S1503, motoring gateway send to monitor to AG and begin request, begin to monitor;

S1504, motoring gateway send to monitor to AG and stop message, finish to monitor.

Wherein, step S1503, motoring gateway send to said AG and monitor beginning message, begin to monitor and can send in any time after said AG starts;

Step S1504, motoring gateway send to monitor to AG and stop message, finish to monitor and can send in any time after monitoring beginning.

In addition, in snoop procedure, AG can send monitoring information to motoring gateway.

The legal listening method that the embodiment of the invention provides; Because AG goes out the Gi interface; And AG is integrated SGSN and/or GGSN function so AG just can take on SGSN and/or GGSN role in monitoring system, have realized relevant information and Content of communciation are carried out Lawful Interception.

The above; Be merely embodiment of the present invention, but protection scope of the present invention is not limited thereto, any technical staff who is familiar with the present technique field is in the technical scope that the present invention discloses; Can expect easily changing or replacement, all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion by said protection range with claim.

Claims

1. the method for an accessing internet by user equipment is characterized in that, comprising:

Access gateway AG receives the activation packet data protocol PDP Context request message that user equipment (UE) sends, and makes said AG be in state of activation; Wherein, the activation packet data protocol PDP Context request message of said access gateway AG reception user equipment (UE) transmission comprises: access gateway AG receives the main packet data protocol PDP Context of the activation request message that UE sends; CN is that UE divides the IP address that is used in the Gi interface business; Said AG sends request from PDP context activation message to said UE after detecting main PDP context activation completion, and requesting activation is from PDP Context; Said AG receives the activation of said UE transmission from packet data protocol PDP Context request message;

Said AG distinguishes the service traffics of the said UE that receives;

2. the method for accessing internet by user equipment according to claim 1 is characterized in that, said AG distinguishes the service traffics of the said UE that receives and comprises:

Said AG is at the said traffic flow template TFT that from PDP Context, specifies Gi interface business flow, perhaps at said service quality QoS of from PDP Context, specifying the Gi interface business.

3. the method for accessing internet by user equipment according to claim 2 is characterized in that, said AG is transmitted to the internet with the flow of said Gi interface and is specially:

Said AG is carried on Gi interface business flow said from PDP Context, transmits.

4. the method for accessing internet by user equipment according to claim 3 is characterized in that,

When PDP Context E-Packets,

For IPv4, be private network IP address if said CN is said UE IP address allocated, then said AG makes network address translation; If public network address, then said AG makes routing forwarding;

For IPv6, said AG carries out network address translation/protocol conversion.

5. the method for accessing internet by user equipment according to claim 4 is characterized in that, after said AG is transmitted to the internet to the flow of said Gi interface, also comprises:

GGSN and said UE deactivate from the PDP Context flow process;

Said AG releasing network address transition/network address/protocol conversion list item;

Said GGSN and said UE deactivate main PDP Context flow process.

6. the method for an accessing internet by user equipment is characterized in that, comprising:

Access gateway AG receives the activation packet data protocol PDP Context request that user equipment (UE) sends, and makes said AG be in state of activation; Which PDP Context receives SGSN notifies carry the Gi interface flow; Wherein, the activation packet data protocol PDP Context request of said access gateway AG reception user equipment (UE) transmission comprises: AG receives the main packet data protocol PDP Context of the activation request message that UE sends; CN is that UE divides the IP address that is used in the Gi interface business; SGSN activates message to the said UE request of sending up and down from PDP after detecting main PDP context activation completion, and requesting activation is from PDP Context; Said SGSN receives the activation of said UE transmission from packet data protocol PDP Context request message;

Said AG distinguishes the service traffics of the said UE that receives;

7. the method for accessing internet by user equipment according to claim 6 is characterized in that, said AG also comprises before the service traffics of the said UE that receives are distinguished:

Said SGSN is at the TFT that from PDP Context, specifies Gi interface business flow, perhaps in the service quality of from PDP Context, specifying the Gi interface business;

Whether said AG: distinguishing according to said appointment is the service traffics of Gi interface if distinguishing the service traffics of the said UE that receives and is specially.

8. the method for accessing internet by user equipment according to claim 7 is characterized in that, said AG is transmitted to the internet with the flow of said Gi interface and is specially:

9. the method for accessing internet by user equipment according to claim 8 is characterized in that,

When PDP Context E-Packets,

For IPv4, if said CN is private network IP address for the UE IP address allocated, then said AG makes network address translation; If public network address, then AG makes routing forwarding;

For IPv6, said AG carries out network address translation/protocol conversion.

10. the method for accessing internet by user equipment according to claim 9 is characterized in that, after said AG is transmitted to the internet to the flow of said Gi interface, also comprises:

GGSN and said UE deactivate from the PDP Context flow process;

Said GGSN and said UE deactivate main PDP Context flow process.

11. an IAD is characterized in that, comprising:

Receiving element is used to receive the activation packet data protocol PDP Context request message that user equipment (UE) sends, and makes said AG be in state of activation; Wherein, the activation packet data protocol PDP Context request message of said reception user equipment (UE) transmission comprises: access gateway AG receives the main packet data protocol PDP Context of the activation request message that UE sends; CN is that UE divides the IP address that is used in the Gi interface business; Said AG sends request from PDP context activation message to said UE after detecting main PDP context activation completion, and requesting activation is from PDP Context; Said AG receives the activation of said UE transmission from packet data protocol PDP Context request message;

Discrimination unit is used for the service traffics of the said UE that receives are distinguished;

Retransmission unit is used for if the service traffics of said UE are the flow of Gi interface, and then said AG is transmitted to the internet with the flow of said Gi interface.

12. an IAD is characterized in that, comprising:

Receiving element is used to receive the activation packet data protocol PDP Context request that user equipment (UE) sends, and makes said AG be in state of activation; Which PDP Context receives SGSN notifies carry the Gi interface flow; Wherein, the activation packet data protocol PDP Context request of the said user equipment (UE) transmission of said reception comprises: AG receives the main packet data protocol PDP Context of the activation request message that UE sends; CN is that UE divides the IP address that is used in the Gi interface business; SGSN activates message to the said UE request of sending up and down from PDP after detecting main PDP context activation completion, and requesting activation is from PDP Context; Said SGSN receives the activation of said UE transmission from packet data protocol PDP Context request message;

Discrimination unit is used for said AG the service traffics of the said UE that receives is distinguished;